Using iron sealed cookies for authentication